Privacy Policy

1. Our approach to privacy

Ganarfit is designed around private fitness groups and accountable challenges. We aim to process personal data fairly, transparently, securely and only for clear service-related purposes. This Policy is intended to support the principles and individual rights recognised under the Nigeria Data Protection Act, 2023.

2. Information we collect

The information we collect depends on how you use Ganarfit. It can include account details such as your name, username, phone number, email address and avatar; profile details such as age, gender, height, weight, fitness level and exercise preferences; and activity information such as eligible workout, step or device-sync data.

We may also handle group membership, invitations, challenge rules, stakes, wallet and payment records, group-chat messages, tagged proof images, support requests, device identifiers, browser data, IP address and security logs. Payment-card or bank information may be handled by our payment providers rather than stored directly by Ganarfit.

3. How we use information

We use personal data to create and secure accounts, operate private groups, deliver invitations, display permitted profile information to group members, track eligible challenge activity, verify results, process permitted payments, prevent fraud and provide customer support. We also use limited technical and aggregate information to maintain, improve and protect the service.

4. Our bases for processing

Depending on the activity, Ganarfit may process data with your consent, to provide the services you request, to meet legal obligations, to protect vital interests, or for legitimate service and security interests that do not override your rights. Where we rely on consent, you may withdraw it, although this may affect features that depend on the relevant data.

5. Connected devices and health information

If you choose to connect a health source or wearable, Ganarfit will request only the permissions needed for the chosen tracking feature. You can disconnect a source in the app. Disconnecting stops future syncing but does not automatically delete activity already used to operate an in-progress challenge or meet legal, security or record- keeping requirements.

6. When we share information

We share relevant information with your private group where that is necessary for group participation, including your profile display, progress, messages and proof content as allowed by the feature. We may also share information with trusted service providers that help us host the platform, send notifications, provide analytics, process payments, prevent fraud or support customers.

We may disclose information where required by law, to protect users or the public, to enforce our Terms, or during a corporate transaction. We do not sell your personal data for another party's independent advertising purposes.

7. International transfers

Our providers may process information from locations outside Nigeria. Where this occurs, we will use appropriate safeguards and contractual measures consistent with applicable data-protection requirements.

8. Cookies and similar technologies

Our website may use cookies and similar technologies to keep the site functioning, remember preferences, understand basic usage and protect against abuse. You can manage cookies in your browser. Some site features may not work properly if essential cookies are blocked.

9. Retention and security

We retain personal data for as long as reasonably necessary for the purposes described in this Policy, including operating your account, resolving disputes, preventing fraud and meeting legal obligations. We use organisational and technical safeguards intended to protect data, but no internet-based service can guarantee absolute security.

10. Your privacy choices and rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion, restriction or objection to certain processing, portability, information about how your data is used, or withdrawal of consent. You may also complain to the Nigeria Data Protection Commission. Information about these rights is available from the Nigeria Data Protection Commission.

11. Children

Ganarfit is not intended for people under 18 in connection with paid challenges. If we learn that we have collected personal data from a child in a manner that requires parental consent, we will take appropriate steps to delete or otherwise handle that information in line with applicable law.

12. Changes and contact

We may update this Policy when our features, providers or legal obligations change. The current version will always show its effective date. For privacy requests or questions, contact us at privacy@ganarfit.com.